Simple Website Banner
Simple Website Banner has 2 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; all 2 are fixed as of September 2026. Their average CVSS score is 6.6, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 1 high.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.
Every one of the 2 issues recorded for Simple Website Banner has a vendor fix available, so running the current release closes all known holes.
2 independent researchers contributed these findings, one record each. Simple Website Banner is installed on roughly 600 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.4.10.
CVE-2022-43469Corona Virus (COVID-19) Banner & Live Data <= 1.7.0.6 - Cross-Site Request Forgery
Read the full analysisVulnerability Records
Simple Website Banner
Author
Nick Tomkin
This is a very simple plugin with a sole purpose of allowing you to inform your visitors of an upcoming event, updated store hours, or other important message you want to display.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C